suse/kernel-livepatch-SLE15-SP6_Update_12&distro=SUSE Linux Enterprise Live Patching 15 SP6

Vulnerabilities (213)

• CVE-2025-37858May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: fs/jfs: Prevent integer overflow in AG size calculation The JFS filesystem calculates allocation group (AG) size using 1 << l2agsize in dbExtendFS(). When l2agsize exceeds 31 (possible with >2TB aggregates on 3

• CVE-2025-37854May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix mode1 reset crash issue If HW scheduler hangs and mode1 reset is used to recover GPU, KFD signal user space to abort the processes. After process abort exit, user queues still use the GPU to acc

• CVE-2025-37853May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: debugfs hang_hws skip GPU with MES debugfs hang_hws is used by GPU reset test with HWS, for MES this crash the kernel with NULL pointer access because dqm->packet_mgr is not setup for MES path. Ski

• CVE-2025-37852May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: handle amdgpu_cgs_create_device() errors in amd_powerplay_create() Add error handling to propagate amdgpu_cgs_create_device() failures to the caller. When amdgpu_cgs_create_device() fails, release h

• CVE-2025-37851May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: Add 'plane' value check Function dispc_ovl_setup is not intended to work with the value OMAP_DSS_WB of the enum parameter plane. The value of this parameter is initialized in dss_init_overlays a

• CVE-2025-37850May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: pwm: mediatek: Prevent divide-by-zero in pwm_mediatek_config() With CONFIG_COMPILE_TEST && !CONFIG_HAVE_CLK, pwm_mediatek_config() has a divide-by-zero in the following line: do_div(resolution, clk_get_rate(p

• CVE-2025-37849May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Tear down vGIC on failed vCPU creation If kvm_arch_vcpu_create() fails to share the vCPU page with the hypervisor, we propagate the error back to the ioctl but leave the vGIC vCPU data initialised.

• CVE-2025-37842May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: spi: fsl-qspi: use devm function instead of driver remove Driver use devm APIs to manage clk/irq/resources and register the spi controller, but the legacy remove function will be called first during device deta

• CVE-2025-37841May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: pm: cpupower: bench: Prevent NULL dereference on malloc failure If malloc returns NULL due to low memory, 'config' pointer can be NULL. Add a check to prevent NULL dereference.

• CVE-2025-37840May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: mtd: rawnand: brcmnand: fix PM resume warning Fixed warning on PM resume as shown below caused due to uninitialized struct nand_operation that checks chip select field : WARN_ON(op->cs >= nanddev_ntargets(&chip

• CVE-2025-37839May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: jbd2: remove wrong sb->s_sequence check Journal emptiness is not determined by sb->s_sequence == 0 but rather by sb->s_start == 0 (which is set a few lines above). Furthermore 0 is a valid transaction ID so the

• CVE-2025-37836May 9, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: PCI: Fix reference leak in pci_register_host_bridge() If device_register() fails, call put_device() to give up the reference to avoid a memory leak, per the comment at device_register(). Found by code review.

• CVE-2025-37833May 8, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: net/niu: Niu requires MSIX ENTRY_DATA fields touch before entry reads Fix niu_try_msix() to not cause a fatal trap on sparc systems. Set PCI_DEV_FLAGS_MSIX_TOUCH_ENTRY_DATA_FIRST on the struct pci_dev to work

• CVE-2025-37831May 8, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix null-ptr-deref in apple_soc_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. apple_soc_cpufreq_get_rate() does not ch

• CVE-2025-37830May 8, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: scmi: Fix null-ptr-deref in scmi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scmi_cpufreq_get_rate() does not check for this ca

• CVE-2025-37829May 8, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: cpufreq: scpi: Fix null-ptr-deref in scpi_cpufreq_get_rate() cpufreq_cpu_get_raw() can return NULL when the target CPU is not present in the policy->cpus mask. scpi_cpufreq_get_rate() does not check for this ca

• CVE-2025-37824May 8, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: tipc: fix NULL pointer dereference in tipc_mon_reinit_self() syzbot reported: tipc: Node number set to 1055423674 Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1

• CVE-2025-37823May 8, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too Similarly to the previous patch, we need to safe guard hfsc_dequeue() too. But for this one, we don't have a reliable reproducer.

• CVE-2025-37820May 8, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: xen-netfront: handle NULL returned by xdp_convert_buff_to_frame() The function xdp_convert_buff_to_frame() may return NULL if it fails to correctly convert the XDP buffer into an XDP frame due to memory constra

• CVE-2025-37819May 8, 2025
  affected < 1-150600.13.3.1fixed 1-150600.13.3.1

  In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() With ACPI in place, gicv2m_get_fwnode() is registered with the pci subsystem as pci_msi_get_fwnode_cb(), which may get invoked at runtime during a